CVE-2021-25352

Using PendingIntent with implicit intent in Bixby Voice prior to version 3.0.52.14 allows attackers to execute privileged action by hijacking and modifying the intent.

Score

CVSS 3.1 7.8 High

Status

Modified - mobile.security@samsung.com

Published

2021-03-25

Last modified

2024-08-03

Weaknesses

CWE-285, CWE-668

Affected products

• Bixby Voice (Samsung)
• Bixby Voice (Samsung Mobile)

References

• https://security.samsungmobile.com/
• https://security.samsungmobile.com/serviceWeb.smsb